Global Situation Board
Flashpoint · Europe & Russia

Russian hybrid operations in Europe

4HighEscalating▲ escalating
Assessed 15 September 2026

Assessment

Russia-linked sabotage against Europe's defence industry has run at a near-weekly tempo since August: fires at the EMCO facility in Bulgaria on Aug 10, at Milrem Robotics in Estonia on Aug 14-15, which Estonia's prime minister called arson with suspected Russian involvement, at WB Electronics in Poland on Aug 31, and incendiary devices thrown at a site beside the Rohde & Schwarz and Helsing offices in Munich on the night of Sept 3, after which German police arrested two Bulgarian nationals. Germany attributed the failed explosive-drone plot against a Ukrainian cargo aircraft at Leipzig/Halle to Russia on Sept 1, raised its threat level to high and closed Russian diplomatic premises, Chancellor Friedrich Merz said on Sept 9 that the attack had been planned in Russia for months, and Lavrov said on Sept 7 that Germany planted the evidence. Denmark's PET warned in early September that Russia is recruiting Danes on social media and gaming platforms, paying in cryptocurrency, to photograph defence sites, and Europe's defence industry association ASD urged firms, governments and security services on Sept 11 to step up vigilance and information-sharing. No newly attributed sabotage incident in an EU or NATO state was verified between Sept 14 and Sept 15.

Recent, assessed

  • 2026-09-11Europe's defence industry association ASD urged companies, governments and security agencies to work closely together after a string of fires and explosions at defence-linked sites; Estonia's PM Michal called the Milrem Robotics fire arson with possible Russian involvement. breakingdefense.com
  • 2026-09-07Lavrov denied Russian involvement in the Leipzig drone plot and said Germany planted the evidence; Western defence officials told the FT the attacks are calibrated to stay below NATO's response threshold. semafor.com

Level history

Threat level after each research review12 September 2026 baseline: level 4; 12 September 2026 weekly review: level 4; 14 September 2026 weekly review: level 4; 15 September 2026 weekly review: level 41234512 September 2026, baseline: level 4, Escalating, trend escalating12 September 2026, weekly review: level 4, Escalating, trend escalating14 September 2026, weekly review: level 4, Escalating, trend escalating15 September 2026, weekly review: level 4, Escalating, trend escalating12 Sep14 Sep15 Septoday

Levels set by research reviews. A level set by hand is shown at the top of the page while it is in force and is not part of this history.

DateLevelStatusTrendReview
2026-09-154Escalating▲ escalatingWeekly review
2026-09-144Escalating▲ escalatingWeekly review
2026-09-124Escalating▲ escalatingWeekly review
2026-09-124Escalating▲ escalatingBaseline

Latest headlines 15

Matched to this entry by keyword from the pull of 19 Sep, 11:09 UTC. Not reviewed; some may be off-topic.